Understand the Meraki Tunneling Traffic Protocol

Available Languages

Download Options

  • PDF     (5.1 KB)
    View with Adobe Reader on a variety of devices
  • ePub     (79.1 KB)
    View in various apps on iPhone, iPad, Android, Sony Reader, or Windows Phone
  • Mobi (Kindle)     (63.7 KB)
    View on Kindle device or Kindle app on multiple devices
Updated:October 21, 2025
Document ID:225237

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

    Introduction

    This document describes the protocol that Meraki uses for IPsec tunnels.

    Prerequisites

    Requirements

    There are no specific requirements for this document.

    Components Used

    The information in this document is based on Cisco Umbrella.

    The information in this document was created from the devices in a specific lab environment. All of the devices used in this document started with a cleared (default) configuration. If your network is live, ensure that you understand the potential impact of any command.

    Overview

    Umbrella uses the IPsec protocol for tunneling traffic. IPsec has multiple components, and one of the key components is IKE which manages negotiation with the peers, authenticating, and certificate exchanges. It also maintains the session by using the keep alive mechanism. Umbrella only supports IKEv2, which is faster and more secure than IKEv1. Meraki supports IKEv1 and IKEv2 for the IPsec tunnels.

    Steps to Enable IKEv2

    To successfully establish an IPsec tunnel between Meraki and Umbrella, please refer to this Meraki knowledge base article: MX and Umbrella SIG IPSec Tunnel

    If you need assistance with configuring the tunnel in the Meraki dashboard, please contact Meraki support.

    Revision History

    Revision Publish Date Comments
    1.0
    21-Oct-2025
    Initial Release
    TAC Authored

    Contributed by Cisco Engineers

    Was this Document Helpful?

    FeedbackFeedback

    Contact Cisco

    This Document Applies to These Products